Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/8WMDwgP8ng5nDy10tsiAsC_WFaA.roa
File: 8WMDwgP8ng5nDy10tsiAsC_WFaA.roa (raw, json)
Hash identifier: kw29w/iwN1y3I+R14y2/RQ0T0/+ujZTAM3MLjMfiiYA=
Subject key identifier: F1:63:03:C2:03:FC:9E:0E:67:0F:2D:74:B6:C8:80:B0:2F:D6:15:A0
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 03
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/8WMDwgP8ng5nDy10tsiAsC_WFaA.roa
Signing time: Tue 16 Mar 2021 04:45:36 +0000
ROA not before: Tue 16 Mar 2021 04:45:36 +0000
ROA not after: Tue 15 Mar 2022 08:34:35 +0000
asID: 9351
IP address blocks: 124.40.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Mar 16 04:45:36 2021 GMT
Not After : Mar 15 08:34:35 2022 GMT
Subject: CN=F16303C203FC9E0E670F2D74B6C880B02FD615A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:25:36:91:95:99:a4:32:4e:97:70:dd:da:95:
b2:88:75:eb:c9:46:f9:af:ce:80:d3:eb:b2:54:1b:
f4:6d:f8:a7:1b:41:14:55:88:33:98:4f:75:a0:41:
5b:16:22:65:2f:44:45:27:d5:98:44:6d:eb:a2:b0:
1f:c8:1c:76:74:08:c2:b9:93:67:50:b6:34:28:53:
79:f1:1e:b6:be:74:08:f7:ca:ee:28:8d:66:3f:55:
74:2f:e9:53:b6:88:46:77:84:a1:23:8b:a8:51:55:
de:38:9d:ae:35:fe:15:80:e6:77:ac:4c:82:74:34:
37:cf:84:09:01:eb:d2:71:53:7a:20:b2:45:47:0b:
de:c4:e0:fd:00:29:7a:c0:7b:be:44:ef:98:87:50:
1f:55:a9:0c:dc:49:89:db:06:f4:2d:ca:74:f3:23:
62:16:d8:cc:e8:e9:31:24:68:84:21:c2:a1:88:81:
fe:99:ef:1a:50:fe:86:75:e6:f3:39:73:6a:5b:83:
23:f6:84:85:d1:5e:f9:48:09:4f:64:52:8c:bd:64:
c2:00:67:1a:bb:c4:f9:fe:9e:1f:38:a8:39:41:e9:
11:9c:53:92:2a:b4:b6:cb:0f:78:79:a3:34:7d:2a:
f5:0c:d1:64:9d:25:e0:28:63:a7:35:cc:92:91:3c:
a4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:63:03:C2:03:FC:9E:0E:67:0F:2D:74:B6:C8:80:B0:2F:D6:15:A0
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/8WMDwgP8ng5nDy10tsiAsC_WFaA.roa
sbgp-ipAddrBlock: critical
IPv4:
124.40.96.0/20
Signature Algorithm: sha256WithRSAEncryption
c8:17:0c:6e:06:a2:21:fc:f3:3d:84:6a:c3:9e:f8:94:07:0b:
10:a7:8d:92:ba:b2:25:9c:db:90:72:8f:ec:76:86:ef:ef:c0:
6b:e1:26:0f:7d:54:8e:ce:d1:9a:f6:50:55:1a:26:8d:f0:1d:
e3:a5:6b:f6:b6:83:eb:9a:61:ce:fa:c1:6c:4c:63:3a:7d:bb:
36:b2:78:d3:d1:bf:c1:7f:b3:23:a6:5e:a2:7d:78:6e:e3:4c:
ee:55:ed:69:7b:26:48:1a:c2:e5:8e:1e:03:24:96:94:ac:ee:
a9:b3:40:cf:60:29:f3:5d:b6:3a:dd:21:66:bb:59:c5:f5:44:
52:4b:e1:5a:f8:d7:15:30:b4:06:83:69:be:9e:85:8e:9f:39:
1d:af:b3:cc:7d:17:31:d3:e4:b5:15:e6:51:f6:dd:57:6c:f1:
79:6b:02:0d:51:d4:de:0a:a5:43:20:f9:c9:15:28:f6:6a:ca:
45:10:58:f0:1e:6c:01:a8:69:a3:47:a4:ee:de:24:b9:43:89:
f8:ac:a2:2d:fe:b5:1b:67:ed:49:a0:74:6f:45:c8:07:8d:4e:
aa:ae:19:e2:94:fb:dc:43:30:80:6e:30:a9:83:c5:f8:50:cf:
71:59:fa:70:29:dc:1c:da:3c:27:05:49:af:73:37:58:14:94:
a4:41:b3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org